PT-2009-3825 · Tibco · Tibco Enterprise Message Service+2

Published 2009-04-30 · Updated 2017-08-17 · CVE-2009-1291

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO SmartSockets versions prior to 6.8.2 TIBCO SmartSockets Product Family (aka RTworks) versions prior to 4.0.5 TIBCO Enterprise Message Service (EMS) versions 4.0.0 through 5.1.1

Description The issue allows remote attackers to execute arbitrary code via inbound data. This can be demonstrated by requests to the UDP interface of the RTserver component and data injection into the TCP stream to tibemsd.

Recommendations For TIBCO SmartSockets versions prior to 6.8.2, update to version 6.8.2 or later. For TIBCO SmartSockets Product Family (aka RTworks) versions prior to 4.0.5, update to version 4.0.5 or later. For TIBCO Enterprise Message Service (EMS) versions 4.0.0 through 5.1.1, update to a version outside of this range.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1291

Affected Products

Tibco Enterprise Message Service

Tibco Smartsockets

Tibco Smartsockets Product Family

References · 13

• http://secunia.com/advisories/34911 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1198 · Vendor Advisory
• http://tibco.com/services/support/advisories/default.jsp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1291 · Security Note
• http://tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt · Vendor Advisory
• http://tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt · Vendor Advisory
• http://tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp · Vendor Advisory
• http://tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt · Vendor Advisory
• http://securityfocus.com/bid/34754 · Note
• http://securitytracker.com/id?1022129 · Note
• http://harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50214 · Note